Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209604.roa
File: AS209604.roa (raw, json)
Hash identifier: P4EBeCgW37W3j231RXnfL4/70VHmvHf6b0/KYfZrFy8=
Subject key identifier: 77:D2:34:46:81:E5:42:F8:63:C1:77:1A:B4:5A:79:82:38:B3:53:F6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 31229062CE4FCFF8789F0D61F5EB36DD3B638B26
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209604.roa
Signing time: Tue 21 Apr 2026 05:36:48 +0000
ROA not before: Tue 21 Apr 2026 05:31:48 +0000
ROA not after: Tue 20 Apr 2027 05:36:48 +0000
asID: 209604
IP address blocks: 92.112.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:22:90:62:ce:4f:cf:f8:78:9f:0d:61:f5:eb:36:dd:3b:63:8b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 21 05:31:48 2026 GMT
Not After : Apr 20 05:36:48 2027 GMT
Subject: CN=77D2344681E542F863C1771AB45A798238B353F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:d0:d7:94:23:12:40:5a:0d:07:e0:c8:dd:
de:31:cd:b3:47:29:23:03:20:63:3a:fc:7a:93:c6:
11:73:71:f9:23:7f:c1:5a:07:de:84:81:84:06:3c:
1c:38:c4:13:ed:fd:82:2d:ba:53:13:29:29:a0:5b:
dd:01:08:38:bb:15:1d:6f:ba:4e:12:17:8f:07:db:
4f:1a:a1:00:57:96:af:8b:d2:85:28:c2:bd:d7:4a:
98:91:92:eb:cc:b5:86:48:23:11:92:16:c0:3e:84:
d1:3b:93:67:58:71:51:15:16:9e:eb:1e:b8:e3:1b:
81:68:36:7a:aa:a2:c9:3a:44:fd:04:10:41:bc:6c:
ce:43:40:1a:a0:e7:b5:7f:5d:45:2d:b9:fc:48:e6:
c9:5d:3a:95:81:04:83:64:6b:6a:e5:3b:60:6e:14:
89:89:68:f0:8d:31:b3:a3:a6:42:00:91:db:e6:80:
b7:21:b5:00:ce:c8:7a:51:cf:6d:5f:c3:b9:67:f1:
25:99:4b:a0:12:99:23:fe:7b:c7:c7:fa:05:29:48:
1c:30:81:5a:51:6d:fd:aa:f9:13:01:c1:f3:58:dc:
d7:83:d9:33:3f:6d:b4:54:fe:24:40:c6:b7:47:a0:
96:b0:4f:1a:88:f5:12:72:22:13:e9:99:69:d2:2f:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:34:46:81:E5:42:F8:63:C1:77:1A:B4:5A:79:82:38:B3:53:F6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.71.0/24
Signature Algorithm: sha256WithRSAEncryption
01:93:03:98:2e:21:32:41:79:43:12:fa:1d:71:d8:cc:6e:13:
b3:23:dc:bd:b3:b7:b8:7d:09:ca:d2:c7:cd:49:64:56:c6:64:
f6:57:8d:40:ef:97:58:ad:85:45:f7:c9:59:90:8f:fb:0f:ba:
54:8e:ca:69:5a:ed:b4:d9:ec:4c:99:b4:cf:8f:3d:2b:81:4c:
d4:b3:fd:dd:74:de:31:22:4c:51:cd:a5:93:28:f1:a9:bc:62:
e3:41:cf:ef:14:e5:a5:2b:89:be:42:a6:85:f9:13:fc:d8:9a:
f1:41:19:a0:9b:a6:92:9b:82:26:fd:4a:c4:9a:41:bc:dc:31:
41:37:c6:88:87:8a:e5:af:e4:55:97:03:c9:a5:fb:81:b6:16:
3e:8e:d3:a7:87:58:f8:a6:b9:79:0f:ec:79:5a:f4:4d:1f:86:
e9:59:e3:e4:62:a0:4b:86:dc:d2:1c:7c:ed:34:2e:28:e2:e2:
19:d3:7e:0b:46:bd:ea:ee:c0:5d:b1:43:95:d2:0b:9b:8d:e3:
86:7f:33:d8:ea:37:e2:07:c2:99:4a:18:92:44:77:af:a6:31:
9b:8d:79:f2:ef:92:e7:ee:12:b0:43:9b:f3:c8:20:1d:06:d4:
61:b8:ae:d6:1b:ad:5f:3a:9c:8c:ad:7f:e7:8f:58:25:98:b5:
64:d0:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:38:44 2026 by rpki-client